openqa-cn / codexqa

# CodexQA
**Shipping fast is table stakes. CodexQA runs fully local, installs ready to use, and tells you if the code is good.**
CodexQA is an open-source Agent Skills pack for Cursor, Claude Code, Codex, and OpenClaw. It provides 10 local-first verification skills and 1 auto-router to verify code quality, trace change blast radius, detect logic defects, audit PRD requirements, generate manual test cases, construct test data, replay browser UI workflows, and diagnose root causes before merging AI-generated code.
After AI coding, the hard part is **verifying quality before you merge**: bugs in what just landed, blast radius on old features, complete test cases, the change knowledge graph (which APIs, methods, and call chains moved), whether architecture broke, security risk, requirement fit, test data you can actually run, and whether a browser flow shows the evidence it claims. **CodexQA** is built for that **test-and-verify stage** — 10 specialized Agent Skills + 1 router, 360° coverage, so you not only write fast, you **see fast whether it is good**, and the development loop actually closes.
Cursor · Claude Code · Codex · OpenClaw. Fully local. Install and use — no account, no gateway, no QA-platform move.
 10+1 skills  · 
 0 accounts  · 
 7/7 blind recall  · 
 0 decoy FPs  · 
 10 languages
 Recorded JS blind eval on inventory-service : 7 planted semantic defects, 4 decoys. Recall 7/7, precision 7/7, 0 trap FPs — Composer, 2026-09-08, one run, not a multi-model benchmark . Semgrep seeds: 102 rules / 10 languages. 
GitHub is the skill source; product site: openqa.cn.
**English | 简体中文**
 Documentation ·
 Quick Start ·
 Skills overview ·
 Install notes ·
 Changelog 
## Overview of all skills
 codexqa-defect-analyzer 
 Verifies — whether the code you just wrote or merged hides bugs or security issues a quick glance would miss. 
 Does — merges SAST / lint / secrets with one Agent semantic pass into a P0–P3 HTML report: location, evidence, suggestion. 
 codexqa-code-reviewer 
 Verifies — whether this change is merge-ready, and whether it silently hits old behavior. A git diff alone rarely shows call chains or test gaps. 
 Does — collects a CodexQA evidence pack (callers, blast radius, test edges), then writes a bilingual REVIEW-REPORT.html you can send to a reviewer. 
 codexqa-code-wiki 
 Verifies — how the repo is actually layered, which module is the hub, and where a newcomer (or an Agent) should start reading. Without a map, “did we break the architecture?” is a guess. 
 Does — builds a local architecture knowledge graph — communities, real dependencies, reading paths — as openable HTML, not a chat summary. 
 codexqa-code-analyzer 
 Verifies — which APIs, methods, and call chains this change actually hits; what to regression-test; which paths still have no tests. 
 Does — queries a local symbol graph for callers, entries, and untested edges. Not a full-text search guess. 
 codexqa-rootcause-analyzer 
 Verifies — after mapping a stack or log back o